Soto88 prioritises the security and confidentiality of every member's personal data. This Privacy Policy clearly explains how we collect, use, store, and protect your information in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
Every decision concerning our members' personal data is made based on six core principles that form the foundation of trust between soto88 and its members.
Your personal data is collected only for specific and legitimate purposes — namely account management, payment processing, KYC identity verification, and legal compliance. No data is collected without clear justification.
All data in transit is protected with TLS 1.3, while stored data is encrypted using AES-256. The soto88 server infrastructure undergoes independent security audits at regular intervals to ensure no vulnerabilities are exposed.
You have the full right to access, amend, download, or request deletion of your personal data at any time through our support channels. Requests will be processed within 14 working days.
Soto88 has never and will never sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. Your data belongs entirely to you.
Only authorised soto88 staff with a legitimate operational need are permitted to access member personal data. All access is logged, monitored, and regularly audited to prevent internal misuse.
This Privacy Policy is reviewed and updated periodically to ensure it remains aligned with changes in law, technology, and global data protection best practices.
Important Note: By registering or using the soto88 platform, you are deemed to have read and fully agreed to this Privacy Policy. If you do not agree, please discontinue use of our platform and contact us for account deletion.
Soto88 collects members' personal information through several channels: during account registration, during platform usage, and through interactions with our support team. This data collection is necessary to ensure the platform operates safely, fairly, and in compliance with applicable legal requirements in Malaysia.
The following are the categories of information we collect:
| Data Category | Example Information | Primary Purpose |
|---|---|---|
| Identity Information | Full name, date of birth, identity card number | KYC verification & fraud prevention |
| Contact Information | Email address, phone number | Account communications & notifications |
| Financial Information | Bank account number, bank name, transaction records | Deposit & withdrawal processing |
| Technical Data | IP address, device type, web browser, operating system | Account security & bot prevention |
| Usage Data | Game history, betting records, active session time | Platform enhancement & responsible gaming |
| Communication Data | Live chat logs, support emails | Complaint resolution & quality control |
Soto88 does not collect more data than is necessary for the purposes stated above. Any sensitive information such as credit card numbers is processed directly by PCI-DSS certified payment processors and is not stored on our servers.
Personal data collected is used solely for lawful and stated purposes. soto88 will not use your data for any purpose outside the following scope without first obtaining your explicit consent:
Marketing Communications: You may opt out of promotional emails at any time by updating your communication preferences in your account settings or by contacting our support team. However, critical notifications related to account security cannot be disabled.
Soto88 understands how sensitive your personal data is, and we take an extremely careful approach when it comes to sharing your information. As a matter of policy, we does not share, sell, or disclose your personal data to external parties except in the following limited and controlled circumstances:
All third-party service providers working with soto88 are vetted and undergo a security risk assessment before being granted access to any member data. They are required to comply with data protection standards equal to or higher than those of soto88.
Cross-Border Data Transfers: If your data needs to be transferred outside Malaysia for operational purposes (e.g., to cloud servers), such transfers are only made to jurisdictions with adequate data protection and are subject to binding data protection agreements.
The security of your personal data is an absolute priority for soto88. We invest seriously in the latest cybersecurity infrastructure to ensure your information is always protected against both internal and external threats.
Technical Measures Used:
Data Retention Period: Your personal data will be retained for the duration your account is active, plus 7 years after account closure to fulfil legal record-keeping and financial audit requirements. After this period, data will be securely deleted using irreversible erasure methods.
In the Event of a Data Breach: While we take every reasonable precaution, no system is 100% guaranteed. In the event of a data breach affecting your information, soto88 will notify you within 72 hours after a breach is identified, in line with industry best practices.
Soto88 uses cookies and similar tracking technologies to enhance the user experience, ensure account security, and understand how members interact with our platform. The use of cookies is industry standard and does not harm your device.
Types of Cookies Used:
You can manage or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect platform functionality. Detailed information on managing cookies is available in your web browser documentation.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by soto88. We are committed to respecting and facilitating the exercise of these rights:
Requesting a copy of all personal data we hold about you in a readily readable format.
Requesting correction of any personal data that is inaccurate, incomplete, or outdated.
Requesting the deletion of your personal data when it is no longer needed or when you withdraw your consent.
Objecting to the processing of your data for direct marketing purposes or under certain other circumstances.
Receiving your data in a structured, machine-readable format for transfer to another service.
Requesting that we restrict the processing of your data under certain circumstances while a query is being resolved.
To exercise any of the rights above, please contact the soto88 support team via live chat or email. Requests will be processed and responded to within 14 working days. In complex cases, this period may be extended up to 30 days with prior notice to you.
The soto88 platform is exclusively for individuals aged 18 years and above only. We do not intentionally collect, store, or process any personal data from children or underage individuals.
If we discover that personal data of a minor has been collected without our knowledge — for example, through fraudulent registration using an adult's information — we will take immediate action to delete that data and close the account.
Parents or guardians who suspect their child has registered an account on soto88 are requested to contact our support team immediately. We will investigate and take appropriate action within 48 hours.
Soto88 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer.
When a material change occurs, we will:
It is your responsibility to review this page periodically. Continued use of the soto88 platform after any changes take effect will be considered acceptance of the updated policy.
If you have any questions, concerns, or complaints regarding how soto88 handles your personal data, we encourage you to contact us directly. Our privacy team is ready to assist you.
Privacy Email: [email protected]
Live Chat 24/7: Reach us via the live chat button at the bottom of the platform for an immediate response. Our support team is available around the clock to assist you.
If you are not satisfied with our response, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia (JPDP) through the official channels established by the authority.